Secure your fleet. Maximize efficiency.

Yes. Kandji offers pre-built templates for Blueprints that are aligned with CIS Level 1 and Level 2 security benchmarks, it allows you to start from a secure baseline in an instant. Kandji continuously enforces security configurations, including endpoint protection, encryption, and password policies. Additionally, Kandji provides auditor access and compliance integrations for detailed reporting, facilitating compliance with standards like SOC 2, ISO 27001, and PCI.

Kandji protects data through several key features:

• Disk Encryption: Enforces FileVault to ensure data at rest is encrypted.
• External storage controls: Manages access to USB drives and other external storage devices.
• Endpoint Detection & Response (EDR): Detects and responds to both generic malware and targeted attacks.
• Remote Lock/Wipe: Allows IT to remotely lock or erase devices if they are lost or stolen.

Kandji integrates with major identity providers, including Okta, Google Workspace, and Microsoft Entra ID. Just set up the integration with your identity provider and unlock a seamless experience that incorporates your user identity into device management:

• Automated device provisioning
• User synchronization
• Configurations and apps based on user identity
• Secure access to corporate resources

Kandji is designed to meet the stringent requirements of regulated industries such as finance, healthcare, and biotech. Many of the world’s leading companies in this industries use Kandji for their device management and security. Kandji’s templates, continuous enforcement mechanisms, and audit-ready reporting capabilities support adherence to standards like SOC 2, ISO 27001, and PCI.

Kandji offers several key integrations with Microsoft’s ecosystem:

• Microsoft Entra ID Integration: Syncs user and group data for device assignments and policy enforcement.
• Microsoft Teams Integration: Delivers real-time notifications and alerts within Teams channels.
• Microsoft Device Compliance: Utilizes Kandji’s device status in Microsoft’s conditional access policies to ensure only managed devices access corporate resources.

Kandji facilitates remote troubleshooting through:

• Device lookup tool: See every configuration, app, and automation that Kandji is deploying to a device alongside the logic which determined its installation. Find Device Lookup in the Assignment Map.
• Remote Access Integrations: Install tools like TeamViewer, AnyDesk, and Splashtop for secure remote sessions.
• Diagnostic data collection: The Kandji Agent has a built-in tool for gathering and submitting detailed diagnostic data from your Mac to Kandji for troubleshooting. This data includes logs, operating system information, and other relevant details about your device.